MAL-2025-115625 Malicious code in lutfi-telur43-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2adbb38d05df8f4ead1713ee6e4651f7bee81ce6482774ba16034125d66fb9a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117861 Malicious code in vida-oncom79-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5f3b0ac354a1ce547c09c57f53c8e85c0e38497cb415b74f168859a7e510a69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112550 Malicious code in ade-rawon100-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10bd1c523ba04b9db3bae7f8fdaf0766993525eaf16e094ac7bf99abc3301357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112772 Malicious code in bambang-ketan51-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5fdf36854fb37fa7803f8c4a206927dbe619bd4f4515b6da8681ca6c5795fd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112977 Malicious code in candra-oncom26-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afd05e49d3019ac71a631e4c9f2ea48b3d9ec1931e702a850749622d2513cc2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117726 Malicious code in utomo-mie20-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 278032eea1cc9c758f46c6d66986ff176c3e1306aa823e0b25f7b06e2959288e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shallow_owl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af9b0e185e0c52a0e818f7fa868356342dd7557c99e3415aaf97f2f1a0f734cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in statutory_pig_ivory-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c369aa0934a2ee12a048dfcb96e7c315c9a1634584b5f852b2dd9e89d147c46f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smooth_snake_orange-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed116846be0ec10955ab6d165daecc62fb2bf1e88293d362f7751bd6423718d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wily_hoverfly_plum-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 138e4760625e9c7196231528feb3d0cd6eebc18cc3d61035434b17ec012680c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flat_bear_maroon-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf2048d743b6e4fb782ae76d4c50838beba267db6021d53baa0ff23368544cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111782 Malicious code in damp_angelfish_gray-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ab6b718eaba6b22579ac5a6971a4171ed71cf56a2b7d0fcc4e6ca287c0d0b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111777 Malicious code in curious_takin_indigo-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760ee835cf085b37bcd5f02912d475f128dd521d180b601ce9ba34344c1d1b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111802 Malicious code in desirable_swan_bronze-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d46c2637209ffa07cc219730eb0819300e60921b0c1466d546365fda955d39a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimistic_shrew_magenta-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32cb3a59290c22d8fe0e3cb8e995be532f270e5dcc7077e2e49c0223a2f011f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eligible_dragon_scarlet-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31cc86f052865a20cae867088bb1b0d06eda1a90572a663223a264b7db735790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in senior_raccoon_magenta-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bce1e7f57219b32c4293f253ef3bab6c37345d9cf36c7db6e59cc474fa6e6eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111953 Malicious code in gradual_ox_magenta-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b67f959bf52f9a1d099159c7fec62515c687ae1b9c0ebd43bbaff2f09de4a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111673 Malicious code in assistant_pheasant_indigo-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb483ad60a8184691e4a5dae1cc1be52fa38d6692cc0804f399575a151b413e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hidden_mastodon_salmon-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 148dbda5dfbafb290510b2cf7dfbaf42d6cb5b2478404d51b6e77d7d70243bf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...